yes it has security features of spoofing

MAC Spoofing is supported featues

used mac binding

Contact support for config assistance

Sangfor support can help in the config assistance

try to use MAC address authentication

Yes, it is possible to stop MAC spoofing attempts to gain unauthorized access even if the attacker knows your user and IP address. Here are some possible measures that you can take to prevent MAC spoofing:

1: Implement port security: This involves configuring the network switches to allow only specific MAC addresses to access a particular port. This way, any attempt to use a different MAC address will be blocked.

2: Use MAC address filtering: This involves configuring your firewall to only allow traffic from specific MAC addresses. This way, any traffic from unauthorized MAC addresses will be blocked.

3: Enable 802.1x authentication: This involves implementing a network access control (NAC) solution that requires users to authenticate before they can access the network. This way, even if an attacker knows your user and IP address, they won't be able to gain access without proper authentication.

4:Use endpoint security solutions: This involves installing endpoint security software that can detect and prevent MAC spoofing attempts, as well as other forms of cyber attacks.

5: Regularly monitor your network: It's important to regularly monitor your network for any unusual or suspicious activity. This way, you can detect and respond to any MAC spoofing attempts or other security threats in a timely manner.

MAC spoofing is usually implemented to fool access control lists, packet filtering, and authentication processes. So, straightforward security measures won't help to prevent this type of attack.

Packet filtering can prevent an IP spoofing attack since it is able to filter out and block packets that contain conflicting source address information. Using cryptographic network protocols such as HTTP Secure (HTTPS) and Secure Shell (SSH) can add another layer of protection to your environment.